Skip to content

VULN UPGRADE: minor upgrades — 4 packages (minor: 3 · patch: 1) #12

Open
campaigner-prod[bot] wants to merge 1 commit intodevfrom
engraver-auto-version-upgrade/minorpatch/poetry/2-1770972164
Open

VULN UPGRADE: minor upgrades — 4 packages (minor: 3 · patch: 1) #12
campaigner-prod[bot] wants to merge 1 commit intodevfrom
engraver-auto-version-upgrade/minorpatch/poetry/2-1770972164

Conversation

@campaigner-prod
Copy link

Summary: Security update — 4 packages upgraded (MINOR changes included)

Manifests changed:

  • . (poetry)

Updates

Package From To Type Vulnerabilities Fixed
marshmallow 3.22.0 3.26.2 minor 2 MODERATE
Flask 3.0.3 3.1.2 minor -
mock 5.1.0 5.2.0 minor -
pytest 8.3.2 8.3.5 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (2)
Package CVE Severity Summary Unsafe Version Fixed In
marshmallow GHSA-428g-f7cq-pgp5 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 3.26.2
marshmallow CVE-2025-68480 MODERATE Marshmallow has DoS in Schema.load(many) 3.22.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants